243 matches found
CVE-2009-0780
The aspathprepend function in rdeattr.c in bgpd in OpenBSD 4.3 and 4.4 allows remote attackers to cause a denial of service application crash via an Autonomous System AS advertisement containing a long AS path...
CVE-2009-0780
The CVE-2009-0780 entry concerns OpenBSD’s bgpd (versions 4.3 and 4.4). The aspath_prepend function in rde_attr.c is exposed to remote attackers who can trigger a denial of service (application crash) by sending an Autonomous System path that is overly long. The connected sources (NVD entry with ...
OpenBSD bgpd守护程序远程拒绝服务漏洞
BUGTRAQ ID: 33828 OpenBSD是一款开放源代码Unix类操作系统。 OpenBSD的usr.sbin/bgpd/rdeattr.c文件中的aspathprepend函数在将其自己的AS附加到超长AS路径时存在错误，如果远程攻击者广播了超长的AS路径就会导致bgpd进程崩溃。 OpenBSD OpenBSD 4.4 OpenBSD OpenBSD 4.3 厂商补丁： OpenBSD ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
CVE-2007-6700
Cross-site scripting XSS vulnerability in cgi-bin/bgplg in the web interface for the BGPD daemon in OpenBSD 4.1 allows remote attackers to inject arbitrary web script or HTML via the cmd parameter...
CVE-2007-6700
Cross-site scripting XSS vulnerability in cgi-bin/bgplg in the web interface for the BGPD daemon in OpenBSD 4.1 allows remote attackers to inject arbitrary web script or HTML via the cmd parameter...
CVE-2007-6700
The CVE-2007-6700 entry describes a Cross-site Scripting (XSS) vulnerability in the cgi-bin/bgplg component of the OpenBSD 4.1 BGPD web interface. Remote attackers could inject arbitrary web script or HTML through the cmd parameter. Affected software is OpenBSD 4.1’s BGPD with the web interface c...
CVE-2007-6700
Cross-site scripting XSS vulnerability in cgi-bin/bgplg in the web interface for the BGPD daemon in OpenBSD 4.1 allows remote attackers to inject arbitrary web script or HTML via the cmd parameter...
[DSECRG-08-007] OpenBSD BGPD daemon Web Interface XSS.
DSECRG-08-007 Digital Security Research Group DSecRG Advisory Application: OpenBSD BGPD daemon Versions Affected: OpenBSD 4.1 Vendor URL: http://openbsd.org Bugs: XSS Exploits: YES Reported: 10.10.2007 Vendor response: 10.10.2007 Date of Public Advisory: 31.01.2008 Authors: Alexandr Polyakov, Ant...
USN-512-1: Quagga vulnerability
It was discovered that Quagga did not correctly verify OPEN messages or COMMUNITY attributes sent from configured peers. Malicious authenticated remote peers could send a specially crafted message which would cause bgpd to abort, leading to a denial of service...
Quagga bgpd BGP routing daemon DoS
Crash on invalid OPEN and UPDATE requests...
[Full-disclosure] [MU-200709-01] Quagga bgpd Remote Denial of Service Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Quagga bgpd Remote Denial of Service Vulnerability MU-200709-01 September 12, 2007 http://labs.musecurity.com/advisories.html Affected Products/Versions: Quagga 0.99.8 Product Overview: Quagga is a routing software suite. Quagga bgpd implements the BG...
CVE-2007-4826
CVE-2007-4826 affects the Quagga bgpd daemon prior to 0.99.9. Affected condition: explicitly configured BGP peers can crash bgpd via a malformed (1) OPEN message or (2) a COMMUNITY attribute, triggering a NULL pointer dereference. Note: vector 2 exists only when debugging is enabled. Remediation:...
CVE-2007-4826
Removed by vendor...
Quagga BGPD UPDATE消息远程拒绝服务漏洞
Quagga是一款基于TCP/IP路由软件套件。 Quagga's bgpd存在一个越界内存读取问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 攻击者发送一个特殊构建的，畸形的多协议可到达/不可到达NLRI属性的UPDATE消息，可触发Quagga's bgpd发生assert而放弃，导致拒绝服务攻击。 Ubuntu Ubuntu Linux 7.04 sparc Ubuntu Ubuntu Linux 7.04 powerpc Ubuntu Ubuntu Linux 7.04 i386 Ubuntu Ubuntu Linux 7.04 amd64 Ubuntu Ubuntu...
Quagga bgpd DoS
bgpd/bgpattr.c in Quagga 0.98.6 and earlier, and 0.99.6 and earlier 0.99 versions, does not validate length values in the MPREACHNLRI and MPUNREACHNLRI attributes, which allows remote attackers to cause a denial of service daemon crash or exit via crafted UPDATE messages that trigger an assertion...
CVE-2007-1995
bgpd/bgpattr.c in Quagga 0.98.6 and earlier, and 0.99.6 and earlier 0.99 versions, does not validate length values in the MPREACHNLRI and MPUNREACHNLRI attributes, which allows remote attackers to cause a denial of service daemon crash or exit via crafted UPDATE messages that trigger an assertion...
CVE-2007-1995
CVE-2007-1995 affects Quagga bgpd. Affects bgpd in Quagga 0.98.6 and earlier, and 0.99.6 and earlier (including 0.99.x before 0.99.7) where MP_REACH_NLRI/MP_UNREACH_NLRI length values aren’t properly validated. A remote attacker could trigger an assertion or an out-of-bounds read via crafted UPDA...
Design/Logic Flaw
bgpd in Quagga 0.98 and 0.99 before 20060504 allows local users to cause a denial of service CPU consumption via a certain sh ip bgp command entered in the telnet interface...